StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data

The document is a cybersecurity news digest covering active exploitation of critical vulnerabilities, malware and botnet campaigns, credential and data theft, ransomware activity, supply-chain and cloud security issues, AI-agent threats, and enterprise platform compromises. Notable incidents include exploitation of macOS Screen Sharing, VMware vCenter, SAP Commerce Cloud, MLflow, Ray, GitLab, and WordPress Forminator vulnerabilities, along with campaigns abusing hacked websites, trusted Microsoft services, RubyGems typosquatting, and macOS stealer infrastructure.